CVE-2024-30063
MediumCVSS 6.7Exploitation Probability (EPSS)
Elevated risk60th percentile - higher than 60% of all known CVEs
Summary
A remote code execution vulnerability in Windows Distributed File System (DFS) allows an attacker to execute arbitrary code remotely in the user context. Exploitation requires sending a specially crafted request to the DFS service.
Risk Assessment
An attacker can take control of the vulnerable system, install malware, modify data, or disrupt services. The risk is particularly high in environments where DFS is enabled.
Recommendation
Apply the security update provided by Microsoft in the monthly cumulative update immediately. Additionally, restrict access to the DFS service to trusted networks only.
Other vulnerabilities in Windows Distributed File System (DFS)
See all- CVE-2026-85931High
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
- CVE-2026-85798High
A heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
- CVE-2026-78446High
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
- CVE-2026-69424High
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS